Tabletop Exercise Three Rivers Contingency Planning Association May 2015 1
Crisis Management Basics Context of the Crisis Stakeholders Exercise Setup Exercise Ground Rules Company Profile Team Roles in a Crisis Composition of Incident Management Team Exercise Q & A 2
What is the context of the crisis? Man made vs. natural? Your fault vs. victim? Blame and outrage? Crisis history? Reputation? Perception vs. reality? Tested crisis plan/team? Business disruption? Long vs. short-term? People hurt/killed vs. only $? Your company vs. many? 3
Employees / Families Contractors / Business Partners Staff Managers (HR, It, etc.) Senior Managers Board of Directors Providers Insurance Providers (P&C, Workers Comp) Suppliers / Distributors Customers Government regulators / politicians Lawyers Competitors Media representatives Local Communities Internet (users / bloggers) Industry activist groups 4
This is a no-pressure exercise there are no right or wrong answers. Exercise injects will be frequent (every 5 minutes or so). Participants may ask the exercise controllers any question, though controllers may not have all the needed information you may need to make assumptions. Each team should keep track of their activities and decisions as the exercise progresses. This is not a real-time exercise. You will be apprised of the date / time throughout the exercise 5
Exercise - Company Profile Regional Utility Always On Utility Company Provides gas, electric, and water service Service area entire state of Pennsylvania 6
Incident Management Team Role Local Site Commander Role Business Continuity Role Local Life Safety Team role Leading Anticipating Managing site Reacting Managing Business Impacts Managing workload Life safety response Evacuate Long Term Principles Wide Focus Short term Process Managing staff Recovery procedures Shelter Shelter in Place Strategic Narrow Tactical Taking care of customers/providers Day to day operations Lockdown First Aid Accounting for employees 7
Incident Management Team Command Staff Incident Commander PIO (Communications) Liaison Safety / Security Scribe (exercise spokesperson) Support Staff Human Resources Facilities IT / Telecommunications Procurement / Travel Insurance / Risk 8
It is Tuesday at 1:45 PM. We have received notification of an issue that requires Incident Management Team involvement. 9
The Security Operations Center has received several calls from the Johnstown Campus that there is an active shooter on site. 10
Has 911 had been notified? What can you see / hear on the security cameras? Are the authorities there yet? Has the shooting stopped? Are you recording what is happening? Can you see where the employees are? Where the shooter is? 11
12
Inform Board of Directors Try to locate someone at the scene Start accounting for employees Communicate to employees at other sites We will want to: Identify Victims Assist in telling families? Talk to the media? Secure the facility Designate a crisis manager on scene? Send someone? Designate a crisis headquarters Establish Crisis Leadership Team Set priorities Victims and Victim families Johnstown Staff All employees Customers Company survival 13
Not certain how many may be injured, but at least three people were transported in ambulances - people are convinced folks are dead Local Life Safety teams are accounting for employees the best they can Employees are obviously under stress, want to leave Staff is being moved to the grassy area behind the building to be interviewed Media has started to arrive We need someone to make sure the phones are transferred and say something so customers get a message and not just ringing Site Safety Officer is with the Chief of Police trying to get information on what is happening and injuries 14
First report on scene 15
This is an exercise this is an exercise---this is an exercise Second Update from SOC 16
Other Always On sites have heard what is happening thru messaging, media reports, email, twitter and are calling into the SOC concerned about their safety not all of the information is accurate From the cameras, it appears the situation is over police appear to have subdued the suspect We have seen some ambulance attendants coming into the building 17
This is an exercise this is an exercise---this is an exercise Second Update from Local Site Commander, Facilities, and Police 18
This is an exercise this is an exercise---this is an exercise Provide update on the situation and what he will be saying to the media regarding the situation 7 people have been injured in the building including the shooter and that 3 additional are expected to be declared dead at the scene (Coroner just arrived) I am about to make a statement to the media The shooter barricaded himself in a conference room when he saw the police 19
This is an exercise this is an exercise---this is an exercise Building was evacuated by the police and everyone we could find is in the grassy area in the back. Police have set up camp and are interviewing and releasing folks. We have family members and friends arriving looking for loved ones and media and random onlookers are everywhere not sure what the tell the family members and don t know if I should speak to the media or not. What should I do? I found most of the Local Responder and BCP s from the site and I have asked them to tell employees to go home when they are released and to call the Contingency Information Line at 6PM for an update I have also asked that people try to limit social media information in respect for family members who may not know what has happened yet 20
This is an exercise this is an exercise---this is an exercise Phones? Account managers to notify customer groups? Questions that need to be on the contingency line by 6PM No work until Monday? Even if folks can work from home? Pay Updates and plan 21
This is an exercise this is an exercise---this is an exercise The office areas are a mess with blood on carpets, walls etc. in several areas The police are still checking for people who may be hiding but we think everyone is out Office building is a crime scene and has been secured by police. No access until released by authorities may be up to two weeks Stop to listen to the Police Chief making statement to the media 22
This is an exercise this is an exercise---this is an exercise At approximately 1:20 this afternoon we got a 911 call reporting an active shooter at this location. When we arrived at the scene, several shots were heard. We have secured the building and removed everyone to safety. We have ten individuals with gunshot wounds, three of them fatal. 7 people have been transported to local hospitals including the alleged shooter. The alleged shooter has been tentatively identified as a Pepe LePew That is all the information we have at this time 23
This is an exercise this is an exercise---this is an exercise End of day 1 update from SOC, Local Site Commander, Facilities 24